Re: [sword-app-tech] using API keys (OAuth?) rather than HTTP Basic Authentication (username/password) in conjunction with a TLS connection

[Philip D. <phi...@ha...>]

Um. Sorry for the late reply. :)

On the topic of API keys and SWORD, this just came across my radar:

'Enter the dashboard's IP address into the "Remote name" field and the
user and API key noted earlier into the "Api username" and "Api key"
fields' -- https://www.archivematica.org/wiki/Sword_API#Configuration

Very interesting.

Phil

On Thu, Aug 1, 2013 at 2:49 PM, Richard Jones <ri...@co...> wrote:
> Nope, no attempt to use OAuth with SWORD that I'm aware of.  We toyed
> with trying to do this as part of the protocol, and then decided that
> it was Too Hard, might put people off implementing, and also ought to
> be orthogonal to the task that sword is trying to carry out, so we
> decided to leave it up to implementers to decide.
>
> Do you think that any modifications to sword are required in order to
> permit OAuth?  Our principal during development was to make sure we
> didn't do anything which prevented such things, but I would like some
> confirmation that we succeeded!
>
> Cheers,
>
> Richard
>
> On 1 August 2013 17:08, Philip Durbin <phi...@ha...> wrote:
>> On Thu, Aug 1, 2013 at 10:07 AM, Philip Durbin
>> <phi...@ha...> wrote:
>>> Does anyone's SWORDv2 implementation use API keys (negotiated via
>>> OAuth, maybe?) rather than HTTP Basic Authentication
>>> (username/password) in conjunction with a TLS connection?
>>
>> It looks like Richard asked a similar question here:
>>
>> Re: [Sword-TAP] on-behalf-of vs. OAuth -
>> http://www.mail-archive.com/swo...@li.../msg00141.html
>>
>> >From what I can tell, no one has implemented OAuth or similar with SWORD yet.
>>
>> Sorry for not noticing this post earlier.
>>
>> Phil
>>
>> --
>> Philip Durbin
>> Software Developer for http://thedata.org
>> http://www.iq.harvard.edu/people/philip-durbin
>>
>> ------------------------------------------------------------------------------
>> Get your SQL database under version control now!
>> Version control is standard for application code, but databases havent
>> caught up. So what steps can you take to put your SQL databases under
>> version control? Why should you start doing it? Read more to find out.
>> http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
>> _______________________________________________
>> sword-app-tech mailing list
>> swo...@li...
>> https://lists.sourceforge.net/lists/listinfo/sword-app-tech
>
>
>
> --
>
> Richard Jones,
>
> Founder, Cottage Labs
> t: @richard_d_jones, @cottagelabs
> w: http://cottagelabs.com



-- 
Philip Durbin
Software Developer for http://thedata.org
http://www.iq.harvard.edu/people/philip-durbin